diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8190f0b..d6aaa9a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v6.5.0
         with:
           go-version-file: go.mod
@@ -24,7 +24,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
       - uses: actions/setup-go@v6.5.0
         with:
           go-version-file: go.mod
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 0650153..453aaec 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -17,7 +17,7 @@ jobs:
   conventional-title:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
       - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50
         id: lint_pr_title
         env:
diff --git a/.github/workflows/demo.yml b/.github/workflows/demo.yml
index fd1ad11..d31339f 100644
--- a/.github/workflows/demo.yml
+++ b/.github/workflows/demo.yml
@@ -36,7 +36,7 @@ jobs:
           app-id: ${{ secrets.CI_BOT_APP_ID }}
           private-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ steps.pr.outputs.head_sha }}
           token: ${{ steps.app-token.outputs.token }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff036ff..0ae2553 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
     needs: setup-env
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0   # fetch all history
           fetch-tags: true # and tags